← Back

Gnucash

gnucash

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Gnucash
gnucash
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-3999
1Gnucash
1Gnucash
Apr 29, 2026
Nov 5, 2010
N/A· v4
N/A· v3
6.9 MEDIUM· v2
gnc-test-env in GnuCash 2.3.15 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVE-2007-0007
1Gnucash
1Gnucash
Apr 23, 2026
Feb 20, 2007
N/A· v4
N/A· v3
3.6 LOW· v2
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) gnucash.trace, (2) qof.trace, and (3) qof.trace.[PID] temporary files.